Privacy Policy.
Effective May 15, 2026 · Material changes communicated by email at least 14 days in advance.
Draft pending legal review. A counsel-reviewed policy will replace this draft before general availability.
On this page
What we collect
- →Account info — email, password hash (Supabase Auth), name and role if you provide them.
- →Business profile — business name, industry, state, entity type, employee count, and locations you enter.
- →Deadlines & documents — items you create or upload to track your compliance.
- →Billing — handled by Stripe. We store a Stripe customer ID; we do not store card numbers.
- →Marketing signals — when you submit a waitlist form, we record source/medium/campaign and the referring URL.
- →Server logs — standard request logs (IP, timestamp, route) for security and abuse prevention, retained 30 days.
How we use it
To provide the service: populate your compliance calendar, send reminders, render dashboards, process payments, and let you share your compliance status with an accountant or auditor you authorize. We use aggregate signals to improve the product. We do not sell your data.
Subprocessors we share with
- →Supabase — database, auth, storage (US region).
- →Stripe — payment processing.
- →Resend — transactional email delivery.
- →Anthropic — AI compliance insights (business profile snippets sent at request time; Anthropic training disabled on our traffic).
- →Vercel — hosting and cron.
Your rights
You can export your data, correct it, or delete your account and all associated data at any time. Email privacy@operatoros.com with requests. We honor verifiable GDPR and CCPA/CPRA rights regardless of jurisdiction.
Security
Data is encrypted in transit (TLS) and at rest. Row-level security policies enforce per-business data isolation. Our engineering-facing threat model is available on request — email security@operatoros.com.
Children
OperatorOS is not intended for users under 18.
Changes
Material changes will be communicated by email at least 14 days in advance.
Contact
Privacy questions: privacy@operatoros.com